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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS: 

1 . (Currently Amended) A countermeasure method for impl e montat i on 
performed in an electronic component and implementing a public-key cryptography 
algorithm compris i ng utilizing exponentiation computation of the type y=g A d, where g 
and y are elements of the a determined group G written in multiplicative notation, 
and d is a predetermined number, said countermeasure method b o ing characteriz e d 
in that it compris e s comprising a masking first step for expressing the exponent d 
randomly in the form d=d 2 s+di, where di, d 2 , and s are integers, and a second step 
for computing the value of y=g A d in G by any double exponentiation algorithm of the 
type (g A di) (h A d 2 ) with h=g A s in G. 

2. (Currently Amended) A countermeasure method according to claim 1 , 
characteriz e d i n that wherein the group G is written in additive notation. 

3. (Currently Amended) A countermeasure method according to claim 1 , 
charact e r i zed in that wherein the method comprises the following steps: 

1) Masking of d: 

1a) Express d randomly in the form d=d 2 s+di, where di, d 2 , and s 
are integers 
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1b) Let (di(t),di(t-1) d^O)) and (d 2 (t),d 2 (t-1) d 2 (0)) be the 

respective binary representations of di and of d 2 
2) Double exponentiation: 

2a) Define (compute) the element h=g A s in G 

2b) Initialize the register A with the neutral element of G 

2c) For i from t down to 0, do the following: 

2c1 ) Replace A with A A 2 

2c2) If di(i)=1 , replace A with A.g 

2c3) If d 2 (i)=1 , replace A with A.h 

2c4) Return A. 



4. (Currently Amended) A countermeasure method according to claim 1 , 
characterized in that wherein the method comprises the following steps: 

1) Masking of d: 

1a) Express d randomly in the form d=d 2 .s+di, where di, d 2l and s 

are integers 

1b) Let (di(t),di(t-1) di(0)) and (d 2 (t),d 2 (t-1) d 2 (0)) be the 

respective binary representations of di and of d 2 

2) Double exponentiation: 

2a) Define (compute) the element h=g A s in G 
2b) Precompute u=g h in G 

2c) Initialize the register A with the neutral element of G 
2d) For i from t down to 0, do the following: 
2d 1 ) Replace A with A A 2 
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2d2) 



If di(i)=1 and d 2 (i)=0, replace A with A g 



2d3) 



If di(i)=0 and d 2 (i)=1 , replace A with A h 



2d4) 



If di(i)=1 and d 2 (i)=1, replace A with A u 



2d5) 



Return A. 



5. (Currently Amended) A countermeasure method according to claim 2, 
oharactorizod i n that wherein the method comprises the following steps: 
1) Masking of d: 

1a) Express d randomly in the form d=d 2 s+di, where di, d 2 , and s 
are integers 



1b) Let (di(t),d 1 (t-1),...,d 1 (0)) and (d 2 (t),d 2 (t-1) d 2 (0)) be the 

respective binary signed-digit representations for di and for d 2 



2) Exponentiation: 

2a) Define (compute) the point R=s*P in G 

2b) Initialize a register A with the neutral element of G 

2c) For i from t down to 0, do the following: 

2c1 ) Replace A with 2*A 

2c2) If d n (i) is non-zero, replace A with A+di(i)*P 

2c3) If d 2 (i) is non-zero, replace A with A+d 2 (i)*R 

2c4) Return A. 



6. (Currently Amended) A countermeasure method according to any 
prcooding claim claim 1 . oharactorizod i n that in tho masking f i rst wherein the step [,] 
of expressing the exponent d randomly in the form d=d 2 s+di, where di, d 2 , and s are 
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integers, consists i n comprises choosing a random integer s and m taking d 2 equal to 
the default value of the integer division of d by s, and di equal to the remainder of 
said division. 

7. (Currently Amended) A countermeasure method according to any on e 
of c l a i ms 1 to 5 claim 1 , charactorizod i n that wherein the step of expressing the 
exponent d randomly in the form d=d 2 s+di, where di, d 2) and s are integers, consists 
m comprises choosing a random integer di, m setting s to the value 1 , and m taking 
d 2 equal to the difference between d and di. 

8. (Currently Amended) An electronic component implementing the 
method according to any preceding cla i m claim 1 . 

9. (New) A countermeasure method according to claim 2, wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+di, where di, d 2 , and 
s are integers, comprises choosing a random integer s and taking d 2 equal to the 
default value of the integer division of d by s, and ^ equal to the remainder of said 
division. 

10. (New) A countermeasure method according to claim 3, wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+di, where d 1f d 2l and 
s are integers, comprises choosing a random integer s and taking d 2 equal to the 
default value of the integer division of d by s, and di equal to the remainder of said 
division. 
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1 1 . (New) A countermeasure method according to claim 4, wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+di, where di, d2, and 
s are integers, comprises choosing a random integer s and taking d 2 equal to the 
default value of the integer division of d by s, and di equal to the remainder of said 
division. 

12. (New) A countermeasure method according to claim 5, wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+di, where di, d 2 , and 
s are integers, comprises choosing a random integer s and taking d 2 equal to the 
default value of the integer division of d by s, and di equal to the remainder of said 
division. 

13. (New) A countermeasure method according to claim 2, wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+di, where di, d 2 , and 
s are integers, comprises choosing a random integer di, setting s to the value 1 , and 
taking d 2 equal to the difference between d and di. 

14. (New) A countermeasure method according to claim 3 wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+di, where di, d 2 , and 
s are integers, comprises choosing a random integer di, setting s to the value 1, and 
taking d 2 equal to the difference between d and di. 

1 5. (New) A countermeasure method according to claim 4, wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+di, where di, d 2 , and 
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s are integers, comprises choosing a random integer di, setting s to the value 1, and 
taking d 2 equal to the difference between d and di. 

16. (New) A countermeasure method according to claim 5, wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+d 1 , where di, d 2 , and 
s are integers, comprises choosing a random integer d-i, setting s to the value 1 , and 
taking d 2 equal to the difference between d and di. 

17. (New) A countermeasure method according to claim 6, wherein the 
step of expressing the exponent d randomly in the form d=d 2 s+di, where di, d 2 , and 
s are integers, comprises choosing a random integer di, setting s to the value 1 , and 
taking d 2 equal to the difference between d and di. 

18. (New) An electronic component implementing the method according to 
claim 2. 

19. (New) An electronic component implementing the method according to 
claim 3. 

20. (New) An electronic component implementing the method according to 
claim 4. 



